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(54) Disk array device 

(57) When it is determined in a disk replacement 
determining section (1 1) that a disk has been replaced 
during system operation, a relerence disk device (30-1) 
is selected by a reference disk selecting section (12) 
from disk devices other than a disk device (31 -n) with a 
disk having been replaced. The firmware (31-1) 
(firmware storing area) of the reference disk device (30- 
1) is copied into the replaced disk device (30-n). 



FIG.1 



HOST 
COMPUTER 



DISK ARRAY CONTROL UNIT 



REFERENCE DISK 
SELECTING SECTION 



DISK REPLACEMENT 
DETERMINING SECTION **" 



FIRMWARE 
-^COPYING SECTION 



31 _^ FIRMWARE 



'fa* 



[REFERENCE DISK) 



(REPLACED DISK) 



CM 
< 

CO 
CO 
h» 

CO 

O) 

O 

Q_ 
LU 



Printed by Xerox (UK) Business Services 
2 16 7/36 



BNSDOCID: <EP._ 0S13763A2 I > 



9 

EP 0 913 763 A2 2 4 



Description 

[0001] The present invention relates to a disk array 
device for accessing a plurality of disk devices in parallel 
and executing input or output of data. ; 
[0C02] Currently, a magnetic disk device, which is 
regarded as one satisfying requirements such as large 
capacity and rapid data transfer, is widely used as an 
external storage device for a computing system. 
[0003] In recent years, a disk array device has 
received attention as a device which further satisfies 
high reliability and low price in addition to the above 
requirements. The disk array device is obtained by 
arranging a plurality of disk devices into which data is 
distributed for storage therein respectively. 
[0004] David A. Patterson et al. of the University of 
California at Berkeley released a paper in which a large 
amount of data was accessed to many physical disks 
and a disk array device for realizing redundancy of data 
in the event of disk failure was evaluated with classifica- 
tion thereof from Level 1 to Level 5 (ACM SIGMOD Con- 
ference; Chicago, June 1-3, 1988. P109 to P116). The 
Levels 1 to 5 for classifying a disk array device proposed 
by David A. Patterson et al. are referred to as RAID 
(Redundant Arrays of Inexpensive Disks) 1 to 5. 
[0005] All the disk array devices have redundant data 
therein. Accordingly, even if a unit of disk device consti : 
tuting an array can not be used for some trouble and 
data can not be read out therefrom, it is possible to 
recover disappeared data by using the redundant data 
and remaining data. 

[0006] However, if any of disk devices is kept faulty, 
the redundancy of the disk array device is low although 
recovery of the data is possible only with difficulty. For 
this reason, when a disk device, constituting the array is 
faulty, the disk device is removed from the arrayed desk 
devices as quickly as possible and a normal disk device 
needs to be incorporated therein anew. 
[0007] Accordingly, when a disk device is faulty, the 
faulty disk is replaced with a disk for maintenance. But a 
version number of the firmware recorded in the disk 
device for maintenance to be inserted anew may be dif- 
ferent from that of disk devices which are already open 
ating in the arrayed disk devices. 
[0008] As the arrayed disk devices are operated by 
logically correlating a plurality of disk devices to each 
other as described above, it is desirable that all opera- 
tions of the correlated disks are the same as each other. 
That is because usage of disk devices with different ver- 
sion numbers of the firmware may cause contradiction 
in control logic, which may in turn generate an opera- 
tional error. 

[0009] It is therefore desirable to realize a disk array 
device which ensures stable operations even when a 
disk device constituting an array is replaced. 
[0010] Each disk device constituting a disk array 
device has firmware for operating itself on each of the 
disk media. Each of the disk devices reads in firmware 



on a memory when power is turned ON and is control- 
led according to the firmware after completion of the 
operation for reading the firmware in. 
[0011] A disk array device embodying the present 

f invention comprises a logical disk consisting of an I/O 
device for storing data therein and an I/O device for stor- 
ing therein redundant data prepared with the data, a 
lower device interface control section connected to a 
plurality of I/O devices constituting the logical disk for 

w transferring data to and from the I/O devices, an upper 
device interlace control section connected to an upper 
device as well as to the lower device interface control 
section for analyzing an operational instruction to the 
logical disk issued from the upper device and also for 

is transferring data to and from the lower device interface 
control section, and a control unit for controlling the 
lower device interface control section and the upper 
device interface control section; and each of the I/O 
devices has a rewritable nonvolatile storage medium 

20 with a control program controlling the device itself and a 
version number of the control program stored therein, 
and the disk array device is also characterized in that 
the control unit has a detecting unit for detecting that 
any of the plurality of I/O devices has been replaced, 

25 and a copying unit for transferring and storing in an I/O 
device detected by the detecting unit a control program 
for I/O devices other than the one among the plurality of 
I/O devices. 

[0012] With the disk array device embodying the 
30 present invention, a control program of a replaced disk 
is matched with a control program of an existing disk, so 
that the reliability of a disk array device can be 
improved. 

[0013] A disk array device embodying the present 

35 invention comprises a logical disk consisting of an I/O 
device for storing data therein and an I/O device for stor- 
ing therein redundant data prepared with the data, a 
lower device interface control section connected to a 
plurality of I/O devices constituting the logical disk for 

40 transferring data to and from the I/O devices, an upper 
device interface control section connected to an upper 
device as well as to the lower device interface control 
section for analyzing an operational instruction to the 
logical disk issued from the upper device and also for 

45 transferring data to and from the lower device interface 
control section, and a control unit for controlling the 
lower device interface control section and the upper 
device interface control section; and each of the J/O 
devices has a rewritable nonvolatile storage medium 

so with a control program controlling the device itself and a 
version number of the control program stored therein, 
and the disk array device is also characterized in that 
the control unit has a detecting unit for detecting that 
any of the plurality of I/O devices has been replaced, a 

55 reference device selecting unit for selecting, when it is 
detected by the detecting unit that any of the I/O devices 
has been replaced, an I/O device other than the 
replaced one from the plurality of I/O devices, and a 
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copying unit for transferring and storing a control pro- 
gram stored in the I/O device selected by the reference 
device selecting unit in the replaced I/O device. 
[0014] With the disk array device embodying the 
present invention, when a disk is replaced during sys- s 
tern operation, one unit of reference disk is selected 
from disk devices other, than the disk device having 
been replaced in the step of disk replacement, and 
firmware of the reference disk is copied into the disk 
device having been replaced in the disk replacement 10. 
step, so that, in addition to improvement of the reliability, 
of the disk array device, firmware can be updated to the 
replaced disk even during system operation. As a result, 
a time for maintenance is not required, and for this rea: 
son convenience of the device can be improved. is 
[0015] In a disk array device embodying the present 
invention, the reference cfisk selecting unit previously 
allocates at least two units of disk device among the plu- 
rality of disk devices as reference disks and selects, 
when either one of the two units of disk device is a disk 20 
device having been replaced in the step of disk replace- 
ment described above, another disk device as a refer- 
ence disk device. . 

[0016] With the disk array device embodying the 
present invention, when either one of the two units of 25 
disk device having previously been allocated as refer- 
ence disks is a disk device having been replaced in the 
step of disk replacement described above, another disk 
device is selected as a reference disk device, so that a 
logical disk can be maintained at any time in fixed 30 
firmware when the disk is replaced. 
[0017] A disk array device embodying the present 
invention comprises a logical disk consisting of an I/O 
device for storing data therein and an I/O device tor.stor- 
ing therein redundant data prepared with the data, a 35 
lower device interface control section connected to a 
plurality of I/O devices constituting the logical disk for 
transferring data to and from the I/O devices, an upper 
device interface control section connected to an upper 
device as well as to the lower device interface control 40 
section for analyzing an operational instruction to the 
logical disk issued from the upper device and also tor 
transferring data to and from the lower device interface 
control section, and a control unit for controlling the 
lower device interface control section and the upper 45 
device interface control section; and each of the I/O 
devices has a rewritable nonvolatile storage medium 
with a control program controlling the device itself and a 
version number of the control program stored therein, 
and the disk array device is also characterized in that so 
the control unit has a storing unit for previously storing 
therein header information such as a version number of 
a control program in correlation to each of the I/O 
devices, a detecting unit for detecting that any of the 
plurality of I/O devices has been replaced, a reference 55 
device selecting unit for selecting, when it is detected by 
the detecting 1 unit that any of the I/O devices has been 
replaced, an I/O device having a version number of a 



control program equal to that of the control program 
before replacement of the I/O device of the plurality of 
I/O devices after replacement of the I/O device by refer- 
ring to the header information stored in the storing unit, 
and a copying unit for transferring and storing a control 
program stored in the I/O device selected by the refer- 
ence device selecting unit in the replaced I/O device. 
[0018] With the disk array device embodying the 
present invention, when a disk is replaced during sys- , 
tern operation, by referring to header information consti- 
tuting firmware for each disk device, a disk device 
having a version number of firmware common to that of 
the disk device before replacement of the disk is 
selected as a reference disk, and firmware for the refer- 
ence disk is copied into the disk device having been 
replaced, so that the firmware can be updated to the 
replaced disk even during system operation in addition 
to improvement of the reliability of the disk array device. 
As a result, a time for maintenance is not required, and 
for this reason convenience of the device can be 
improved. 

[0019] A disk array device embodying the present 
invention comprises a plurality unite of disk devices 
each having firmware and operating according to the 
firmware, one or a plurality units of spare disk devices 
each having firmware and functioning as a spare for any 
of the plurality of disk devices according to the firmware, 
and a disk array control device connected to the plurality 
of disk devices as well as to one or a plurality of spare 
disk devices for controlling data transfer between an 
upper device and the plurality of disk devices and that 
between each of the disk devices and one or a plurality 
units of spare disk; and the disk array control device 
comprises a determining unit for determining whether 
any disk has been replaced or not during system opera- 
tion, a reference disk selecting unit for selecting, when it 
is determined by the determining unit that any disk has 
been replaced, a reference disk from one or a plurality 
units of spare disk devices, and a copying unit for copy- 
ing firmware for the reference disk selected by the refer- 
ence disk selecting unit into a disk device replaced in 
the disk replacement step. / , 
[0020] With the disk array device embodying the 
present invention, when a disk is replaced during sys- 
tem operation, one or any of the plurality of spare disk 
devices is selected as a reference disk, and the 
firmware for the reference disk is copied into the disk 
having been replaced, so that firmware enabling main- 
tenance of a physical disk at any time with a fixed ver- 
sion number can be loaded to the replaced disk even 
during system operation. With this feature, in addition to 
the reliability of the disk array, throughput thereof in 
operation can be improved. 

[0021] In a disk array device embodying the present 
invention, when the disk device having been replaced in 
the disk replacement step has inhibited firmware having 
previously been decided, a copying operation by the 
copying unit is stopped based oh the recognition that ah 
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error has occurred. 

[0022] With the disk array device embodying the 
present invention, when the disk device having been 
replaced in the disk replacement step has inhibited 
firmware having previously been decided, a copying 
operation by the copying unit is stopped based on the 
recognition that an error has occurred, so that the disk 
devices having been replaced are not always recog- 
nized as objects to be operated, using of any disk 
device having incompatible firmware can be prevented 
before it is used. With this feature, the reliability of a disk 
array device can be further improved. 
[0023] A disk array device embodying the present 
invention comprises a plurality units of disk device each 
having firmware including header information such as a 
version number of the firmware and operating according 
to the firmware, a disk device for loading with a plurality 
types of firmware each having a different version 
number of firmware respectively stored therein, and a 
disk array control device connected to the plurality units 
of disk device as well as to the disk device for loading for 
controlling data transfer between an upper device and 
the plurality units of disk device and that between each 
of the disk devices and the disk device for loading; and 
the disk array control device comprises a storing unit for 
previously storing therein header information constitut- 
ing firmware for each of the disk devices, a determining 
unit for determining whether any disk has been replaced 
during system operation, a reference firmware selecting 
unit for extracting, when it is determined by the deter- 
mining unit that any disk has been replaced, one 
firmware having a firmware version number equal to 
that of firmware for the disk device before replacement 
of the disk among the firmware stored in the disk device 
for loading by referring to the header information stored 
in the storing unit and selecting the extracted firmware 
as reference firmware, and a copying unit for copying 
the reference firmware selected by the reference 
firmware selecting unit into the replaced disk device. 
[0024] With the disk array device embodying the 
present invention, a disk device for loading with a plural- 
ity types of firmware each having a different version 
number of firmware respectively stored therein is pre- 
pared, and when a disk is replaced during system oper- 
ation, the firmware (inside the disk device for loading) 
having a firmware version number common to that of 
the disk device before replacement of the disk is copied 
into the disk device having been replaced as reference 
firmware by referring to header information, so that the 
firmware with which a state of a logical disk before and 
after the disk replacement can be maintained is loaded 
to the replaced disk even during system operation 
according to application of the disk device for loading 
provided for maintenance. With this feature, in addition 
to the reliability of the disk array, throughput thereof for 
the operation can be improved. 
[0025] Reference will now be made, by way of exam- 
ple, to the accompanying drawings in which:- 



Fig. 1 is a block diagram showing principles of the 
disk array device according to Embodiment 1 of the 
present invention; 

Fig. 2 is a block diagram showing an example of 
s hardware configuration for the disk array device 
according to Embodiment 1 of the present inven- 
tion; 

Fig. 3 is a block diagram concretely showing inter- 
nal configuration of the disk device shown in Fig. 2; 
10 Fig. 4 is a view showing a format example of 
firmware; 

Fig. 5 is a view showing a relation of header infor- 
mation among physical disks in a table form in 
Embodiment 1 ; 

15 Fig. 6 is a flow chart for explaining firmware updat- 
ing processing according to Embodiment 1 ; 
Fig. 7 is a flow chart for explaining reference disk 
selection processing according to Embodiment 1 ; 
Fig. 8 is views each showing a type of header infor- 

20 mation for a replaced disk in Embodiment 1 ; 

Fig. 9 is a block diagram showing a key section of 
the disk array device according to Embodiment 2 of 
the present invention; 

Fig. 10 is a flow chart for explaining reference disk 
25 selection processing according to Embodiment 2; 
Fig. 1 1 is a flow chart for explaining reference disk 
selection processing according to Embodiment 3 of 
the present invention; 

Fig. 12 is a flow chart for explaining reference disk 
30 selection processing according to Embodiment 4 of 
the present invention; 

Fig. 13 is a flow chart for explaining reference disk 
selection processing according to Embodiment 5 of 
the present invention; 
35 Fig. 14 is a flow chart for explaining reference disk 
selection processing according to Embodiment 6 of 
the present invention; 

Fig. 15 is a block diagram showing an example of 
hardware configuration of the disk array device 
40 according to Embodiment 7 of the present inven- 
tion; 

Fig. 16 is a flow chart for explaining reference disk 
selection processing according to Embodiment 7 of 
the present invention; . . 

45 Fig. 1 7 is a block diagram showing principles of the 
disk array device according to Embodiment 8 of the 
. present invention; 
Fig. 18 is a block diagram showing a key section of 
the disk array device according to Embodiment 8 of 

so the present invention; 

Fig. 19 is a view for explaining information on load- 
ing of the disk device for loading according to 
Embodiments; 

Fig. 20 is a flow chart for explaining firmware updat- 
55 ing processing according to Embodiment 8; and 

Fig. 21 is a flow chart for explaining reference disk 
selection processing according to Embodiment 8. 
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[0026] Detailed description is made hereinafter for 
preferred embodiments of the disk array device accord- 
ing to the present invention with reference to the related 
drawings. ^ 

[0027] At first, description is made for principles. Fig. 
1 is a block diagram showing principles of a disk array 
device accprding to Embodiment 1 of the present inven- 
tion. The disk array device shown in Fig. 1 comprises a 
disk array 30 comprising a plurality of disk devices 30-1 

• • • each storing therein data transferred from a host 
computer 20 as an upper device, a disk array cbhtrol 
device 10 connecting a plurality of disk devices 30-1 

• • • in parallel to each other for controlling data trans- 
fer between the host computer 20 and each of trie disk 
devices 30-1 • * *. It should be noted that the host com- 
puter 20 instructs the disk array control device 10 to 
write data therein and read out data therefrom. 
[0028] The disk array control device 10 comprises a 
disk replacement determining section 11, a reference 
disk selecting section 12, and a firmware copying sec- 
tion 13. The disk replacement determining section 1 1 
determines, when any disk device in the disk array 30 is 
replaced due to its failure or the lite, whether the 
replacement is actually performed or not. 

[0029] The reference disk selecting section 12 
selects, when it is detected by the disk replacement 
determining section 11 that the replacement has been 
performed, a disk device with firmware to be copied into 
a replaced disk device stored therein from the disk 
devices constituting the disk array. This selected disk 
device is referred to as a reference disk. 
[0030] Logic for selection of a reference disk may 
require any disk of which an address is the smallest in 
the disk devices or in which a minimum version number 
of firmware among the disk devices is stored. It is need- 
less to say that the present invention is not limited to the 
logic for selection. 

[0031] "Hie firmware copying section 13 instructs, 
when it is detected by the disk replacement determining 
section 1 1 that the replacement of the disk device is 
actually performed, a disk device (e.g., the disk device 
30-1) selected by the reference disk selecting section 
12 to read out firmware stored in a firmware storing 
area. Then, the firmware copying section 13 instructs 
the new disk having been replaced to transfer the read 
out firmware as well as to store the firmware in the 
firmware storing area 

[0032] As described above, copying of firmware can 
be realized between disk devices. With the configura- 
tion shown in Embodiment 1 , when disk replacement is 
detected in the disk replacement determining section 
1 1 , a reference disk device is selected by the reference 
disk selecting section 12. Then, the firmware for the ref- 
erence disk device is copied into the disk device with a 
disk having been replaced by the firmware copying sec- 
tion 13. As a result, each firmware version number for 
disk devices constituting the disk array can be main- 
tained to a fixed one. 



[0033] Next description is made for a case where the 
functional blocks are realized as hardware. Fig. 2 is a 
block diagram showing an example of hardware config- 
uration for the disk array device according to Embodi- 

5 ment 1 of the present invention. 

[0034] The disk array control device 10 comprises, as 
shown in Fig. 2, a host adapter 101 as an upper device 
interface control section, a MPU 102, a ROM 103, a 
RAM 104, a cache control section 105, a cache memory 

10 1 06, a data transfer buffer 1 07, a device adapter 1 08-1 , 
to 108-m (m: natural number) as a lower device inter- 
face control section, and an internal bus 109. it should » 
be noted that each of the units are connected to the 
internal bus 109, and the cache memory 106 is con- 

15 nected to the internal bus 1 09 through the cache control 
section 105. 

[0035] ' The host adapter 101 is connected to the host 
computer 20 and interfaces between the host computer 
20 and the disk array control device 10. The MPU 102 

20 controls entire operations of the disk array control 
device 10 according to a program (including an applica- 
tion 103a) stored in the ROM 103. This MPU 102 exe- 
cutes, other than the ordinary control for the disk array, 
the processing for copying firmware for the reference 

25 disk device into a disk device having been replaced, due 
to its failure according to the principles (Refer to Fig. 1). 
[0036] The ROM103 stores therein programs such as 
the application 103a for realizing functions for the disk 
replacement determining section 11, reference disk 

30 selecting section 12, and the firmware copying section 
13 other than the OS (operating system). The RAM 104 
is used as a work area for the MPU 102 for executing 
various types of program. 

[0037] The cache control section 105 indirectly con- 

35 nects the cache memory 106 to the internal bus 109, 
and controls data transfer between each of the units < 
connected to the internal bus 109 and the cache mem- . 
dry 106. The cache memory 106 is a unit for caching, 
data therein. -■•!'•.«..-. 

40 [0038] The data transfer buffer 107 is a memory for 
temporarily accumulating data for transfer. This data 
transfer buffer 107 temporarily accumulates firmware 
read out from the reference disk device based on the 
principle described above, and then transfers the 

45 firmware to a firmware storing area for a disk device 
having been replaced. * *t 

[0039] The disk adapters 108-1, 108-2, 108-3, 108:4 
• • • 108-m areconnectedtothediskdevices30-1, 30- 
2, 30-3, 30-4 • • 30-m respectively, and each of the 

so adapters interfaces between each disk device and the 
disk array control device 10; ' 
[0040] Detailed description is further made for the disk 
device. Fig. 3 is a block diagram concretely showing 
internal configuration of the disk device shown in Fig, 2. 

55 Fig. 3 shows a disk device 30-n (1 ^ n ^ m) as a repre- 
sentative disk device. This disk device 30-n comprises a 
SCSI protocol chip (SPC) section 301 connected to the 
disk array control device 10 (device. adapter 108:n), a 
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MPU 302, a ROM 303, a RAM 304, a buffer 305, and a 
disk 306. A 
[0041] The reference disk selecting section 12 does z 
not randomly select a reference disk device for selection - - 
thereof in Embodiment 1, but previously allocates two f 
units of the disk device 30-1 and 30-2 from the smaller ' 
number of the disk numbers as reference disk devices. - % 
It should be noted that this arrangement for reference , - 
disks is not limited to the disk devices 30-1 and 30-2, but * 
other disk numbers may be employed. s ^ 

[0042] Allocation of the two units of disk devices as 
reference disk devices here is because the other disk - 
device can be substituted as a reference disk device 
when one of the devices can not function as a reference 
disk device. For this reason, if the disk device 30-n is 
shown in Fig. 3 is the disk device 30-1 or 30-2, the disk 
device functions as a reference disk device to a 
replaced disk according to the principles. 
[0043] The SPC section 301 controls a SCSI protocol 
with the disk array control device 1 0. The MPU 302 con- 20 
trols read or write of data (firmware, user data) from or 
to the disk 306 according to the program stored in the 
ROM 303. The ROM 303 stores therein various types of 
programs for operating the MPU 302. The RAM 304 is 
used as a work area for execution of the program in the 25 
MPU 303. 

[0044] The buffer 305 is a memory for temporarily 
accumulating transfer data (firmware, user data) when 
data is transferred to the disk array control device 10. v , ; . 
The disk 306 has a firmware storing area 31 -n for stor-, -30 
ing therein firmware arid a user-data storing area 32-h 
for storing therein user data. This disk 306 reads or 
writes data from or to an area required by the disk array 
control deivice 1 0 according to control by the MPU 302. 
[0045] Next description is made for an example of a 35 
format of firmware. Fig. 4 is a view showing a format; n 
example of firmware, and Fig. 5 is a view showing a** ! 
relation of header information among physical disks in a < 
table form in Embodiment 1 . 

[0046] The format of the firmware in Embodiment 1 is.; f 0 
divided, as shown in Fig. 4, into a header section and a, 
main body. Recorded in the header section are a type of 
a format, a firmware version number, a date when thje 
main body of the firmware is recorded, capacity of a disk 
and an inhibited firmware version number, and the main ; 
body of firmware is recorded in the main body thereof/' "> 
[0047] The inhibited firmware version number here < ' 
indicates a firmware version number which should not 
be used for the disk device. A different component may ; ; 
be used for a disk device depending on a manufacture's - so 
lot version number or the like, and the mismatch > 
between the hardware and firmware of the disk device , 
may occur due to this difference between the compor' ; 
nents, which may cause contradiction in control. To pre- v 
vent this contradiction in control, a firmware version 55 
number not matching with the hardware is shown as art 
inhibited firmware version number. 
[0048] Fig. 5 shows a relation of header sections 



among disk devices when the disk array 30 normally 
operates without replacement of a disk. The same type 
A is employed in the disk devices 30-1 to 30-m as one 
example. If a different type of disk device is replaced tike 
a type B or a type C, the different type thereof can not be 
incorporated in the disk according to checking by the 
header section and can not be constructed as a logic 
disk for normally operating although the system opera- 
tion itself is not stopped. However, a condition that a 
common type of disk is provided for each of the same 
logical unit number (LUN) is required for returning the 
system to a state of normal operation thereof. 
[0049] Also, concerning other header information in 
the disk devices 30-1 to 30-m, which are not restricted 
by the above condition, there are common conditions to 
each other such as a firmware version number: "0003", 
a date: Wl 0/1 V. capacity: "2G W , and inhibited 
firmware: "0001". 

[0050] Next description is made for operations. Fig. 6 
is a flow chart for explaining firmware updating process- 
ing according to Embodiment 1 , Fig. 7 is a flow chart for 
explaining reference disk selection processing accord- 
ing to Embodiment 1 , and Fig. 8 is views each showing 
a type of header information for a replaced disk in 
Embodiment 1 . Herein, description is made for the.step 
to start with when a physical disk for the disk device 30- 
n has been replaced due to its failure. 
[0051 ] At first, after a disk is replaced, when execution 
of the disk replacement is confirmed (step S1), header 
information in the header section is read out from the 
disk device 30-n with a disk having been replaced (step 
S2). Namely, information in the header section of 
firmware is temporarily stored in the buffer 305 from the 
firmware storing area 31 -n in the disk 306, and then, the 
header information is stored in the RAM 1 04 for the disk 
array control device 10. 

[0052] Then, to confirm the conditions described 
above, determination is made as to whether the type of 
a format is an available type A (refer to Fig. 5) or not 
(step S3). As a result, when the disk device. 30-n 
employs a different type like the type B (Refer to Fig. 8A) 
or type Cf the processing for making a report on an error 
indicating that the type is different to the host computer 
20 is executed- through the host adapter 101. The 
firmwatre updating processing is stopped by this 
processing for the error. 

[0053] On the other hand, when the disk device 30-n 
has employed the same type A, further determination is 
made as to whether the firmware version number of a 
replaced disk corresponds to the inhibited firmware 
"0001" shared with other disk devices or not by referring 
to the header information stored in the RAM 104 (step 
S4). , 

[0054] As a result, when the disk device 30-n employs 
a firmware version number "0001" corresponding to the 
inhibited firmware as shown in Fig. 8B, the processing 
for making a report on an error indicating that the 
replaced disk is the inhibited firmware to the host com- 



6 



<EP 0913763A2 I > 



11 

puter 20 is executed through the host adapter 101. The 
firmWare updating processing is stopped by this 
processing for the error. 

[0055] Although the inhibited firmware of itself is set 
here to "0002" in the header information in Fig. 8B, if the 
inhibited firmware is "0003*', a firmware version number 
of other disk device corresponds to inhibited firmware, 
so that the replaced disk device 30-n can not be moved. 
Accordingly, determination 'on a reversed case to the 
above case is also included in step S4, and the firmware 
updating processing is stopped with the processing for 
the error. 

[0056] On the "other hand, if it is determined in step S4 
that the disk device 30-n has employed a firmware ver- 
sion number other than that of the inhibited firmware, 
the disk selection processing for selecting a reference 
disk device (Refer to Fig. 7) from the disk devices 30-1 
to 30-m in the same LUN (disk array 30) is executed 
(step S5). This reference disk selection processing 
determines/ in addition to selection of a reference disk 
device, that copying is allowed only to a replaced disk 
device employing a lower firmware version number than 
that of the reference disk device. 
[0057] Accordingly, if it is determined in step S5 that 
copying is allowed, in step S6, the processing further 
shifts to step S7 based on determination that the copy- 
ing is allowed, but if it is determined in step S5 that cop- 
ying is not allowed, in step S6, the copying operation is 
omitted based on determination that the copying is not 
allowed,' and the firmware updating processing is 
ended. 

[0058] in step S7, firmware is read out from the 
firmware storing area for the reference disk device as an 
original disk device for copying, and thef irmware is tem- 
porarily stored in the data transfer buffer 107. Then, in 
step S8. the firmware stored in the data transfer buffer 
107 is transferred to the firmware storing area 31 -n of 
the replaced disk device 30-n as a destination to be 
copied. With this copying operation, the firmware in the 
firmware storing area 31 -n is updated with the same 
firmware as that for the reference disk device. * ' 
[0059] Next detailed description is made for the refer- 
ence disk selection processing in step S5 with reference 
to Fig. 7. When the processing shifts to the reference 
disk selection' processing, at first, determination is 
made as to whether a replaced disk device is a header 
of t;7e same LUN, namely the disk device 30-1 or not 
(step S11). If it is determined that the replaced disk 
device is the disk device 30-1 , the next disk device 30-2 
is selected as a reference disk device (step S13), and if 
it is determined that the replaced-disk device is not the 
device 30-1 , the disk device 30-1 is selected as a refer- 
ence disk device (step S12). 

[0060] When the reference disk device is selected as 
described above, header information for the reference 
disk device is further read out (step St4), and a 
firmware version number is compared between a desti- 
nation to be copied (disk to be replaced) and an original 
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disk device for copying (reference disk) (step S15). For 
instance, if a firmware version number of a disk device 
to be replaced is "0002" (Refer to Fig. 8C), it is deter- 
mined that the firmware version number "0002" of the 

5 destination to be copied is lower than the firmware ver- 
sion number "0003" of the original disk device for copy- 
ing (step S16), and for this reason this case requires the 
copying operation. Accordingly, the processing shifts to 
step S17, and it is decided therein that the copying is 

10 allowed. 

[0061] On the other hand, if a firmware version 
number of a disk device to be replaced is "0004" (Refer 
to Fig. 8D), it is determined that the firmware version 
number "0004" of the destination to be copied is higher ( 

is than the firmware version number "0003" of the original 
disk device for copying (step S16), and for this reason 
this case does not require the copying operation. 
Accordingly, the processing shifts to step S18, ancj it is 
decided therein that the copying is not allowed. It should 

20 be noted that the case where the firmware version 
number of the original disk device for copying is equal to 
that of the destination to be copied is also regarded as , 
that copying of the same version number is a wasteful , 
operation, so that the same processing is executed 

25 based on the decision that the copying is not allowed 
[0062] As described above, with Embodiment 1, 
firmware is loaded to the replaced disk 30-n even during 
system operation, so that, in addition to the reliability of 
the disk array 30, throughput of the disk array device for , 

30 operation can be improved. 

[0063] Also, when either, one of the two units of disk 
device (disk device 30-1) is a disk device having been 
replaced among the two units of disk device having pre- 
viously been allocated as reference disks, another disk 

35 device (disk device 30-2) is selected as a reference disk 
device, so that a logical disk can be maintained at any , 
time in fixed firmware, version number when the disk is 
replaced.. * 

[0064] Only when the firmware version number of ^a 
40 disk device having been replaced is lower than that of a 
reference disk device (disk device 30-1 or 30-2), cppy- 
ing is executed, so that such waste that a disk is made 
effort to be back to firmware in an older version number 
is eliminated, and for this reason throughput of the disk 
45 array device for operation can further be improved. 
[0065] The disk devices having been replaced are not 
always recognized as objects to be operated, so that 
using of any disk device having incompatible firmware 
decided as an inhibited firmware (e.g., firmware version 
so number "0001 ") can be prevented before it is used, and 
for this reason the reliability of the disk array 30 can fur- 
ther be improved. ( v 

[0066] Although the original disk device for copying of 
firmware is fixed to the header or the next disk device of 
55 the same LUN in Embodiment .1 . like in Embodiment 2 
described below, firmware updating, operation may be 
executed with a disk device having firmware in the same 
version , number as that of the firmware before disk 
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replacement as an original disk device for copying. It 
should be noted that the entire configuration of Embod- 
iment 2 described below is the same as that of Embod- 
iment 1 , so that figures and description thereof are 
omitted herein. 

[0057] At first, description is made for sections of the 
configuration different from those of Embodiment 1 . Fig. 
9 is a block diagram showing a key section of a disk 
array device according to Embodiment 2 of the present 
invention. A header information storing area 106a is 
provided in a cache memory 106 in Embodiment 2. 
Header information for each of the disk devices 30-1 to 
30-m are previously stored in this header information 
storing area 106a in correlation to each other shown in 
Fig. 5. 

[0088] Next description is made for steps of the oper- 
ations different from those of Embodiment 1 . As for the 
entire operations in Embodiment 2, description is made 
herein only for reference disk selection processing 
because firmware updating processing here is the same 
as described above. Fig. 1 0 is a flow chart for explaining 
reference disk selection processing according to 
Embodiment 2. 

[0CS9] In this reference disk selection processing, at 
first, a disk device having firmware in a version number 
equal to the firmware version number of the disk before 
replacement is extracted by referring to header informa- 
tion stored in the header information storing area 106a 
(step S21). As a result, if the disk device can be 
extracted (step S22), the processing shifts to step S23, 
and the extracted disk device is selected as a reference 
disk device. 

[0070] Although the disk device 30-1 or 30-2 is fixedly 
selected as a reference disk device in Embodiment 1 , in 
Embodiment 2, firmware version numbers are matched 
to each other before and after disk replacement, so that 
any disk device satisfying the condition described above 
is selected as a reference disk device. When a refer- 
ence disk device is selected as described above, it is 
determined in the following step S24 that copying is 
allowed, and the processing returns to the firmware 
updating processing in Fig. 6. 
[0071] On the other hand, if any disk device can not 
be extracted (step S22), the processing shifts to step 
S25, and it is determined that copying is not allowed, 
and then the processing returns to the firmware updat- 
ing processing in Fig. 6. It should be noted that, when 
copying is not allowed, the processing is programmed to 
end as it is in the firmware updating processing in Fig. 6, 
but a message indicating that there is no disk device as 
an original disk device for copying may be reported to 
the host computer 20. 

[0072] As described above, with Embodiment 2, each 
header information for firmware of each of the disk 
devices 30-1 to 30-m is previously stored, and the 
firmware in the same firmware version number is loaded 
to a replaced disk, by referring to the header informa- 
tion, so as to enable maintenance of a state of the logi- 



cal disk before and after the disk replacement even 
during system operation, so that, in addition to the relia- 
bility of the disk array 30, throughput of the disk array 
device for operation can be improved. 

5 [0073] Although the firmware updating operation is 
executed with a disk device having firmware in the same 
version number as that of the firmware before disk 
replacement as an original disk device for copying in 
Embodiment 2, like in Embodiment 3 described below, 

10 firmware updating operation may be executed with a 
disk device, as an original disk device for copying, hav- 
ing firmware in a version number which the largest 
number of disk devices among disk devices have in 
common. 

15 [0074] It should be noted that the entire configuration 
of Embodiment 3 described below is the same as that of 
Embodiment 1 , so that figures and description thereof 
are omitted herein. Also, in Embodiment 3, it is not 
always required to provide the header information stor- 

20 ing area 106a in the cache memory 106 like that in 
Embodiment 2. 

[0075] Next description is made for steps of the oper- 
ations different from those of Embodiment 1 . As for the 
entire operations in Embodiment 3, description is made 
25 herein only for reference disk selection processing 
because firmware updating processing here is the same 
as described above. Fig. 1 1 is a flow chart for explaining 
reference disk selection processing according to 
Embodiment 3. 

30 [0076] In this reference disk selection processing, at 
first, access is made to the firmware storing areas 31-1 
to 31 -m in the disk devices 30-1 to 30-m, and determi- 
nation is made by referring to header information 
therein which is a firmware version number that the larg- 

35 est number of disk devices have in common in the same 
LUN (step S31). A disk device having the firmware in 
the version number extracted as described above is 
extracted from the disk array 30 (step S32). The 
extracted disk device is selected as a reference disk 

40 device (step S33). 

[0077] Then, although the processing returns to the. 
firmware updating processing in Rg. 6, determination 
as to whether copying is allowed or not in step S6 is 
omitted in the firmware updating processing because 

45 determination is not made in this reference disk selec- 
tion processing (Refer to Fig. 1 1) as to whether copying 
is allowed or not. 

[0078] As described above, with Embodiment 3, the 
firmware in the commonest version number is loaded to 

so a replaced disk so as to suppress the possibility to 
cause logical contradiction on the logical disk after disk 
replacement even during system operation, so that, in 
addition to the reliability of the disk array*30, throughput 
of the disk array device for operation can be improved. 

55 [0079] Although header information is previously 
stored like in Embodiment 2 and a method of not refer- 
ring to the header information is employed for selection 
of a reference disk in Embodiment 3, but the header 
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information storing area 106a may be provided in the 
cache memory 1 06 and employ a method of referring to 
the header information also in Embodiment 3. 
[0080] Also, in the reference disk selection process- 
ing, it is not mentioned about whether a firmware ver- s 
sion number of a replaced disk is included or not in 
determination as to whether the firmware version 
number is one which the largest number of disk devices 
have in common or not, but either of the cases may be 
effected. ; * 10 

[0081] As for selection of a reference disk, .like in 
Embodiment 4 described below, firmware updating 
processing may be executed with a disk device having 
the highest firmware version number as an original disk 
device for copying as one of variations, different from is 
those of Embodiments 2 and 3. 
[0082] It should be noted that the entire configuration 
of Embodiment 4 described below is the same as that of 
Embodiment 1, so that figures and description thereof 
are omitted herein. Also, in Embodiment 4, it is not, 20 
always required to provide the header information stor- 
ing area 106a in the cache memory 106 like that in 
Embodiment 2. 

[0083] Next description is made for steps of the oper- 
ations different from those of Embodiment 1 . As for the 25 
entire operations in Embodiment 4, description is made 
herein only for reference disk selection processing 
because firmware updating processing here is the same 
as described above. Fig. 12 is a flow chart for explaining 
reference disk selection processing according to 30 
Embodiment 4. 

[0084] In this reference disk selection processing, at 
first, access is made to the firmware storing areas 31 -1 
to 31-m in the disk devices 30:1 to 30-m, and a disk 
device having firmware in the highest firmware version 35 
number is extracted from the disk array 30 in the same 
LUN (including a replaced disk) by referring to header 
information therein (step S41). The extracted disk 
device is selected as a reference disk device (step S42). 
[0085] Then, although the processing returns to the 40 
firmware updating processing in Fig. 6, determination 
as 'to whether copying is allowed or not in step S6 is 
omitted in the firmware updating processing because 
determination is not made in this reference disk selec- 
tion processing (Refer to Fig. 1 2) as to whether copying 45 
is allowed or not. 

[0086] As described above, with Embodiment 4, the 
firmware in the highest version number is loaded to a 
replaced disk so as not to generate logical contradiction 
due to difference of the firmware version number on the so 
logical disk even during system operation, so that, in 
addition to the reliability of the disk array 30, throughput 
of the disk array device for operation can be improved. 
[0087] As for selection of a reference disk, like in 
Embodiment 5. described below, firmware updating 55 
processing may be executed with a disk device having 
the latest date when firmware is loaded, therein as an 
original disk device for copying as one of variations dif- 



ferent from those of Embodiments 2, 3 and 4. 
[0088] It should be noted that the entire configuration 
of Embodiment 5 described below is the same as that of 
Embodiment 1, so that f igures and description thereof 
are omitted herein. Also, in Embodiment 5, it is not 
always required to provide the header information stor- 
ing area 106a in the cache memory 106 like that in 
Embodiment 2. 

[0089] Next description is made for steps of the oper- 
ations different from those of Embodiment 1 . As for the 
entire operations in Embodiment 5, description is made 
herein only for reference disk selection processing 
because firmware updating processing here is the same 
as described above. Fig. 13 is a flow chart for explaining 
reference disk selection processing according to 
Embodiments. 5 
[0090] In this reference disk selection processing] at 
first, access is made .to the firmware storing areas 31-1 
to 3 1 -m in the disk devices 30-1 to 30 : m, and one unit of 
disk device having the latest date when firmware is 
loaded therein is extracted from the disk array 30 in the ^ 
same LUN (not including a replaced disk) by referring to 
header information therein (step S51). The extracted 
disk device is selected as a reference disk device (step 
S52). * 
[0091] Then, although the processing returns to the 
firmware updating processing in Fig. 6, determination 
as to. whether copying is allowed or not in step S6 is 
omitted in the firmware updating processing because 
determination is not made in this reference disk selec- 
tion processing (Refer to Fig. 13) as to whether copying 
is allowed or not. 

[0092] As described above, with Embodiment 5, the 
firmware stored on the latest, date is loaded to a 
replaced disk so as not to generate logical contradiction 
due to an earlier date on the logical disk even during 
system operation, so that, in addition to the reliability of 
the disk array 30, throughput of the disk array device for 
operation can be improved. 

[0093] As for selection of a reference disk, like in 
Embodiment 6 described below, firmware updating 
processing may be executed, not depending on a 
firmware version number or date, with a disk device 
adjacent to a replaced disk device as an original disk 
device for copying as one of variations different from 
those of Embodiments 2 to 5. 
[0094] It should be noted that the entire configuration 
of Embodiment 6 described below is the same as that of 
Embodiment 1 , so that figures and description thereof 
are omitted herein. Also, in Embodiment 6, it is not 
always required to provide the header information stor- 
ing area 106a in the cache memory 106 like that in 
Embodiment 2. 

[0095] Next description is made for steps of the oper- 
ations different from those of Embodiment 1. As for the 
entire operations in Embodiment^, description is made 
herein only for reference disk selection processing 
because firmware updating processing here is the same 
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as described above. Fig. 1 4 is a flow chart for explaining . 
reference disk selection processing according ttr 
Embodiment 6. : 
[0096] In this reference disk setection processing, a 
disk device connected to either one of forward- and : 's 
backward-provided disk devices of a replaced disk 
device is selected from the disk array 30 as a reference 
disk device (step $61). 

[0097] Then, although the processing returns to the 
firmware updating processing in Fig. 6, determination w 
as to whether copying is allowed or not in step S6 is 
omitted in the firmware updating processing because 
determination is not made in this reference disk selec- 
tion processing (Refer to Fig. 1 4) as to whether copying 
is allowed or not is 
[0098] As described above, with Embodiment 6, the 
firmware of the adjacent disk device is loaded to a 
replaced disk so that a disk device for maintenance is 
not fixed thereto even during system operation; so that, 
in addition to the reliability of the disk array 30, through- 20 
put of the disk array device for operation can be 
improved. 

[0099] Although there has been employed a method 
of selecting a reference disk device from any disk 
devices of the disk array 30 in Embodiments 1 to 6, like 25 
in Embodiment 7 described below, a spare disk device* 
is incorporated in the same LUN and firmware updating 
may be executed with firmware of the spare disk device 
It should be noted that the entire configuration of / 
Embodiment 7 described below is the same as that of '30 
Embodiment 1 ( so that figures and description thereof 
are omitted herein. • ; *- 

[0100] At first, description is made for configuration 
Fig. 15 is a block diagram showing an example of hard- 
ware configuration of a disk array device according to 35- 
Embodiment 7 of the present invention. The disk arrays "j 
device shown in Fig. 15 comprises a disk array control" i 
device 40 and a disk array comprising disk devices 30- 1 *- 
1 * '• • , and spare disk devices 30-M and 30-M+1 . 
[01 01 ] The disk array control device 40 has the same; jo 
internal r configuration as a whole as that of the disk: : 
array device 10, but as each section different from tffieT* . 
configuration, there is configuration in which a device*" 
adapter (not shown) for interfacing between an applica- 
tion and the spare disk devices 30-M and 30-M+1 * js V 45 
added to the above configuration. - * 

[0102] Two units of spare disk devices 30-M and 30- 
M+1 are provided in Embodiment 7 as an example. The 
spare disk devices 30-M and 30-M+1 have firmware' ^ 
storing areas 31-M and 31-M+1 provided in disks ^so 
respectively because each device supplies firmware as ■ 
an original disk device for copying other than functioning , 
as an ordinary spare disk. 

[0103] Next description is made for steps of the oper- 7 
ations different from those of Embodiment 1 . As for the 55 
entire operations in Embodiment 7, description is made : 
herein only for reference disk selection processing 7: 
because firmware updating processing here is the sanW 



as described above. Fig. 16 is a flow chart for explaining 
reference disk selection processing according to 
Embodiment 7 of the present invention. 
[0104] In this reference disk selection processing, an 
arbitrary unit of spare disk device is extracted from the 
spare disk devices 30-M and 30 : M+1 (step S71), and 
the extracted spare disk device is selected as a refer- 
ence disk device (step S72). It should be noted that the 
method employed in Embodiments 2 to 6 may be 
applied for extraction in step S71 . 
[0105] Then, although the processing returns to the 
firmware updating processing in Fig. 6, determination 
as to whether copying is allowed or not in step S6 is 
omitted in the firmware updating processing because 
determination is not made in this reference disk selec- 
tion processing (Refer to Fig. 16) as to whether copying 
is allowed or not. * 

[0106] As described above, with Embodiment 7, a 
spare disk device is applied, and the firmware with 
which a physical disk can be maintained at any time 
according to the fixed firmware version number thereof 
is loaded to a replaced disk even during system opera- 
tion, so that, in addition to the reliability of the disk array, 
throughput of the disk array device for operation can be 
improved. 

[0107] Although there has been employed a method 
of selecting a reference disk device for updating 
firmware in Embodiments 1 to 7, like in Embodiment 8 . 
described below, a method of selecting reference 
firmware from multiple types of firmware previously pre- 
pared for updating firmware may be employed. It should 
be noted that the entire hardware configuration of 
Embodiment 8 described below is the same as that of 
Embodiment 1 , so that figures and description thereof 
are omitted herein. 

[0108] At first, description is made for principles. Fig. 
1 7 is a block diagram showing principles of a disk array 
device according to Embodiment 8 of the present inven- 
tion. The disk array device shown in Fig.. 1 7 comprises 
a disk array 30 comprising a plurality of disk devices 30- 
1 • • • each for storing therein data transferred from the 
host computer 20 as an upper device, a disk array con- 
trol device 50 with a plurality of disk devices 30-1 
connected to each other in parallel for controlling data 
transfer between the host computer 20 and each of the 
devices 30-1 • • • ; and a disk device for loading 60 for 
storing therein data transferred from the host computer 
20 as an upper device with various types of firmware 
stored therein. It should be noted that the host computer 
20 instructs to the disk array control device 50 to write 
and read data in and from the device. 
[01 09] The disk array control device 50 comprises a 
disk replacement determining section 51, a reference 
firmware selecting section 52, a header information 
storing section 53 and a firmware copying section 54. 
The disk replacement 1 determining section 51 deter- 
mines, when any disk device in the disk array 30 is 
replaced due to its failure or the like, whether the 
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replacement is actually performed or not. 
[0110] The reference firmware selecting section 52 
selects, when it is determined by the disk replacement 
determining section 51 that the replacement has been 
performed, firmware (reference firmware) as a refer- 
ence from the disk device for loading. 60 for forming a 
physical disk from the disk dievices 30-1 * • • constitut- 
ing the disk array 30. The header information storing 
section 53 previously reads out header information for 
each of the disk devices 30-1 to 30-m in the disk array 
30 and stores therein the read out information. >■ 
[0111] The firmware copying section 54 realizes, 
when it is determined by the disk replacement determin- 
ing section 51 that the replacement has* been per-; 
formed, copying of firmware between disk devices by 
reading out the reference firmware selected by the ref- 
erence firmware selecting section 52 from the disk 
device for loading 60 and writing (loading) the firmware 
in the disk device with a disk having been replaced. 
[01 1 2] With the configuration described above, when 
it is determined by the disk replacement determining 
section 51 during system operation that any disk has 
been replaced, firmware equal to that of the disk device * 
before replacement of the disk is selected by the refer- 
ence firmware selecting section 52. Then the firmware 
(disk device for loading 60) selected by the firmware 
copying section 54 is copied into a disk device with a 
disk having been replaced in the disk array 30. 
[01 1 3] Next description is made for a case where the 
functional blocks are realized as hardware. Description 
is made only for different sections from the configuration ,- 
in Fig. 2. Fig. 18 is a block diagram showing a key sec- 
tion of the disk array device according to Embodiment 8 
of the present invention. The disk array control device, 
according to Embodiment 8 has, as shown in Fig. 18, a 
header information storing area 106a provided in a 
cache memory 106 like in Embodiment 2, and a device 
adapter 110 for.the disk device for loading 60 connected 
to an internal bus 109. 

[0114] It should be noted that, from the viewpoint of 
hardware thereof, a MPU 102 is a unit for realizing func- 
tions of the disk replacement determining section 51 , 
reference firmware selecting section 52, header infor- 
mation storing section 53 and firmware copying section 
54 each based on the principles described above (refer 
to Fig. 17). The operations of the MPU 102 follows the 
application (stored in the RAM 104) for realizing, the 
principles. ' 

[01 1 5] Next description is made for firmware stored in 
the disk device for loading 60, namely information con- 
cerning loading. Fig. 19 is a view for explaining informa- 
tion on loading of the disk device for loading according 
to Embodiment 8. The loading information has configu- 
ration, as shown in Fig. 19, in which main bodies of 
firmware are stored in correlation between a type of disk 
device and firmware version numbers. . 
[0116] In the example ol Fig. 19, there are two types 
of A and B, and four types of firmware version number 
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of 0001 to 0004. In the type A, main bodies of firmware 
FWA1, FWA2, FWA3, and FWA4 are correlated to the 
firmware version numbers "0001", "0002", "0003", and 
"0004 B respectively. In the type B, main bodies of 
5 firmware. FWB1, FWB2, FWB3, and FWB4 are corre- 
lated to the firmware version numbers "0001", "0002", 
"0003", and "0004" respectively. 
[0117] Next description is made for the operations. 
Fig. 20 is a flow chart for explaining firmware updating 
10 processing according to Embodiment 8, and Fig. 21 is.a 
flow chart for, explaining reference disk selection 
processing according to Embodiment 8. In Embodiment 
8, similarly to Embodiment 1, the processing from step 
S1 to step S4 (step S81 in Fig. 20) (Refer to Fig. 6) is 
is common and the processing after step S5 and on in Fig. 
6 is different from that of Embodiment 8. 
[0118] In Embodiment 8, processing for selecting a 
reference d irmware (Refer to Fig. 21) is executed in step ; 
S82 following the step S81 . Determination is made also 
...20 in this reference firmware selection processing as to ^ 
whether copying is allowed or not like jn the reference 
disk selection processing described above. If it is jdeter- , 
mined that copying is allowed (step S83), the reference 
firmware of the disk device for loading 60 as an original . 
25 disk device for copying is transferred, to the data transfer 
buffer 107 in step,S84. and the reference firmware is 
further transferred to a firmware storing area of . a 
replaced, disk device as a destination to be copied in 
step S85. . 

30 [01 19] . Next detailed description is made for the refer- 
ence firmware selection processing in step 82 of Fig. 20 
with reference to Fig. 21 . When the processing shifts to 
the processing for selecting reference firmware, atfirst, 
header information stored in the header information 
35* storing area 106a of; the cache memory 106 is referred 
to. in step,S91, and firmware having the type and 
firmware version number coincident with those of a disk 
device before replacement of the disk, namely having 
the same conditions is discriminated in the information 
40 concerning loading, > . t ■ 

[01 20] As a result, if discrimination of firmware can be 
made from the loading, information (step S92), the 
processing shifts to step S93, and the discriminated 
firmware is.selected as reference firmware. It is decided 
45 that copying is allowed in further step S94. Oh the other 
hand, if discrimination of firmware can not be made 
from the loading information (step S92), the processing 
shifts to step S95, and it is decided therein that copying 
is not allowed. The processing returns to the firmware 
so updating processing in Fig. 20 according to the decision 
that copying is allowed or copying is not allowed as 
described above. 

[0121] As described above, with Embodiment 8, 
firmware with which a state of, the logical, disk can be 
55 maintained before and after the disk replacement is 
loaded to a replaced disk even during system operation 
by applying the disk device for loading 60 provided for 
maintenance, so that, in 'addition^ the reliability of the 
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disk array 30, throughput of the disk array device for 
operation can be improved. 

[0122] Conventionally, as maintenance has been tar- 
geted for ail the physical disks, wasteful revision has 
been executed on a physical disk not requiring revision, s 
and on the other hand, the system has been stopped 
operating to execute a revision work only for one unit of 
physical disk having a different firmware version 2. 
number. For this reason, throughput of a system has 
been reduced based on the conventional technology 10 
due to waste of loading operation for firmware or opera- 
tional loss because of a pause of the system, but with 
the present invention, the reliability of a disk array 
device can be improved. 

[0123] With the present invention, firmware can fur- is 
ther be updated to a replaced disk even during system 
operation, so that a time for maintenance is not 
required, and for this reason, convenience of the device 
can be improved: 

[0124] This application is based on Japanese patent so 
application No. HEI 9-299209 filed in the Japanese Pat- 
ent Office on October 30, 1997, the entire contents of 
which are hereby' incorporated by reference. 
[01 25] Although the invention has been described with 
respect to a specific embodiment for a complete and 25 
clear disclosure, the appended claims are not to be thus 
limited but are to be construed as embodying all modifi- 
cations and alternative constructions that may occur to 
one skilled in the art which fairly fall within the basic 
teaching herein set forth. 30 

Claims 

1 . A disk array device comprising: 

35 

a logical disk consisting of an I/O device for 
storing data therein and an I/O device for stor- 
ing therein redundant data prepared with said 
data; 

a lower device interface control section con- 40 
nected to a plurality of I/O devices constituting 
said logical disk for transferring data to and 
from said I/O devices; 

an upper device interface control section con- 3. 
nected to an upper device as well as to said 45 
lower device interface control section for ana- 
lysing an operational instruction to said logical 
disk issued from said upper device and also for 
transferring data to and from said lower device 
interface control section; and so 4. 

a control unit for controlling said lower device 
interface control section and said upper device 
interface control section; wherein each of said 
I/O devices has a rewritable nonvolatile storage 
s medium with a control program controlling the 55 

11 device itself and a version number of said con- 
trol program stored therein, wherein said con- 
trol unit has: % 5. 



a detecting unit for detecting that any of said 
plurality of I/O devices has been replaced, and 
a copying unit for transferring, to a replaced I/O 
device detected by said detecting unit, the con- 
trol program from a non-replaced one of the 
devices. 

A disk array device comprising: 

a logical disk consisting of an I/O device for 
storing data therein and an I/O device for stor- 
ing therein redundant data prepared with said 
data; 

a lower device interface control section con- 
nected to a plurality of I/O devices constituting 
said logical disk for transferring data to and 
from said I/O devices; 

an upper device interface control section con- 
nected to an upper device as well as to said 
lower, device interface control section for ana- 
lyzing an operational instruction to said logical 
disk issued from said upper device and also for 
transferring data to and from said lower device 
interface control section; and 
a control unit for controlling said lower device 
interface control section and said upper device 
interface control section; wherein each of said 
I/O devices has a rewritable nonvolatile storage 
medium with a control program controlling the 
device itself and a version number of said con- 
trol program stored therein, wherein said con- 
trol unit has: 

a detecting unit for detecting that any of said 
plurality of I/O devices has been replaced, 
a reference device selecting unit for selecting, 
when it is detected by said detecting unit that 
any of the I/O devices has been replaced, an 
I/O device other than said replaced I/O device; 
and 

a copying unit for transferring and storing the 
control program of the selected I/O device in 
said replaced I/O device. 

A disk array device according to claim 2, wherein, 
when said replaced disk device has firmware hav- 
ing been inhibited, a copying operation by said cop- 
ying unit is stopped based on the recognition that 
an error has occurred. 

A disk array device according to claim 2 or 3, 
wherein said reference disk selecting unit previ- 
ously allocates at least two disk device units among 
said plurality of disk devices as reference disk 
devices and selects, when either one of said two 
units was replaced in the disk replacement step, 
another disk device as a reference disk device. 

A disk array device according to claim 4, wherein, 
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when said replaced disk device has firmware hav- 
\ irig Been inhibited, a copying operation by said cop- 
ying unit is stopped based On the recognition that 
'an error has occurred. 

5 

6. A disk array device comprising : 

a logical disk consisting of an I/O device for 
storing data therein and an I/O device for stor- 
ing therein redundant data prepared with said 10 
data: 

a lower device interface control section con- 
nected to a plurality of I/O devices constituting 
said logical disk for transferring data to and 
from said I/O devices; is 
an upper device interface control section con- 
nected to an upper device as well as to said 
lower device interface control section for ana- 
lyzing an operational instruction to said logical 
disk issued from said upper device and also for 20 
transferring data to and from said lower device 
interface control section; and 
a control unit for controlling said lower device 
interface control section and said upper device 
interface control section; wherein each of said 25 
I/O devices has a rewritable nonvolatile storage 
medium with a control program controlling the 
device itself and a version number of said con- 
trol program stored therein, wherein said con- 
trol unit has: " . 30 
: a storing unit previously storing therein header 
information such as a version number of a con- 
trol program in correlation to each of said I/O 
devices; 

a detecting unit for detecting that any of said 35 
plurality of I/O devices has been replaced; 
a reference device selecting unit for selecting, 
when it is detected by said detecting unit that 
any of the I/O devices has been replaced, an 
I/O device having a version number of control 40 
program equal to that of the control program 
before replacement of the I/O device of said 
plurality of I/O devices after replacement of the 
I/O device by referring to the header informa- 
tion stored in said storing unit; and 45 
a copying unit for transferring and storing a 
control program stored in the* I/O device 
selected by said reference device selecting unit 
in said replaced I/O device. 

50 

7. A disk array device according to claim 6, wherein, 
when said replaced disk device has firmware hav- 
ing been inhibited, a copying operation by said cop- 
ying unit is stopped based on the recognition that 
an error has occurred. 

8. A disk array device comprising: 



a plurality of disk devices each having firmware 
and operating according to the firmware; 
one or more spare disk devices each having 
firmware and functioning as a spare for any of 
said plurality of disk devices according to said 
firmware; and 

a disk array control device connected to said 
plurality of disk devices as well as to the or 
each spare disk device for controlling data 
transfer between an upper device and said plu- 
rality of disk devices and between each of said 
disk devices and spare disk devices; wherein 
said disk array control device comprises: 
a determining unit for determining whether any 
disk has been replaced or not during system 
operation; f f 
a reference disk selecting unit for selecting, 
when it is determined by said determining unit 
that any disk has been replaced, a spare disk 
device as a reference disk, and 
a copying unit for copying firmware of the refers 
ence disk selected by said reference, disk 
selecting unit into said replaced disk device. 

9. A disk-array device according to claim 8, wherein, 
when said replaced disk device has firmware hav- 
ing been inhibited, a copying operation by said cop- 
ying unit is stopped based on the recognition that 
an error has occurred. ~, 

10. A disk array device comprising: 

a plurality of disk devices each having firmware 
including header information such as a version 
number of the firmware and operating accord- 
ing to said firmware; 
. a further disk device storing a plurality of types 
, of firmware each having a different version 
number of firmware respectively stored therein; 
and . 

. a disk array control device connected to said 
plurality of disk devices as wetl as to said fur- 
ther disk device for controlling- data transfer 
between an upper device and . said plurality of 
disk devices and between each of said disk 
. devices and said further disk devices; wherein 
said disk array control device comprises: 
a storing unit for previously storing therein 
header, information constituting firmware for 
each of the disk devices; 
a determining unit for determining whether any 
disk has been replaced during system opera- 
tion; v 
a reference firmware selecting unit for extract- 
ing, when it js determined by said determining 
unit that any disk has been replaced, firmware 
having a firmware version number equal to that 
of firmware for the disk device before replace- 
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ment of the disk among the firmware stored in 
said further disk device by referring to the 
header information stored in said storing unit 
and selecting said extracted firmware as refer- 
ence firmware; and 5 
a copying unit for copying the reference 
firmware selected by said reference firmware 
selecting unit into said replaced disk device. • 
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